专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明公开

US20240289454A1 APPARATUS AND METHOD FOR COLLECTING MALICIOUS CODE META INFORMATION 审中-公开
公开(公告)号：US20240289454A1
公开(公告)日：2024-08-29
申请号：US18438539
申请日：2024-02-12
申请人： Korea Internet & Security Agency
发明人： Jae Han JEONG , Chan Woong HWANG , Jae Gyu JEON , Woong GO
IPC分类号： G06F21/56 , G06F16/38
CPC分类号： G06F21/563 , G06F16/38
摘要： An apparatus for collecting meta data related to malicious code meta information, includes: an application programming interface (API) key setting unit configured to register as a member of a collection channel related to malicious code of cyber attacks, and set the API key as an initialization input; a collection channel access unit configured to, upon input of the set API key, access the collection channel; an execution command interpretation unit configured to, subsequent to accessing the collection channel, upon input of an execution command, interpret the input execution command; and a meta information management unit configured to, based on API information provided from the collection channel according to the interpreted execution command, extract at least one piece of meta information for identifying an attack group, and manage the at least one piece of meta information in a JSON format for each attack group.

2. 发明公开

US20240154990A1 DEVICE FOR AUTOMATICALLY SORTING CYBER ATTACK BASED ON ARTIFICIAL INTELLIGENCE USING SECURITY EVENT OF DIFFERENT KINDS OF SECURITY DEVICES 审中-公开
公开(公告)号：US20240154990A1
公开(公告)日：2024-05-09
申请号：US18385384
申请日：2023-10-31
申请人： Korea Internet & Security Agency
发明人： Do Won KIM , Tae Eun KIM , Ki Jong SON , Sae Woom LEE , Seul Ki CHOI , Tae Hyeon KIM , Gyeong Jin NA
IPC分类号： H04L9/40
CPC分类号： H04L63/1433 , H04L63/1416 , H04L63/1425
摘要： A device for automatically sorting a cyber attack includes an event feature generator that extracts a unique attacker IP by analyzing attacker IPs for each of the different kinds of security devices, and generates AI learning features of the security events of the different kinds of security devices including feature numerical data quantifying at least two or more features through attack information analysis recorded in the different kinds of security devices based on the information on the security events of the different kinds of security devices mapped to the extracted unique attacker IP, and an attack type sorter that learns the generated feature numerical data using an unsupervised learning algorithm, generates clustering data by sorting the feature numerical data into similar attack data and clustering sorted feature numerical data, and then analyzes the generated clustering data to identify a short-term or long-term attacker's cyber attack type.

3. 发明公开

US20240152608A1 METHOD FOR SUPPORTING DECISION-MAKING IN SECURITY CONTROL ENVIRONMENT BASED ON ARTIFICIAL INTELLIGENCE 审中-公开
公开(公告)号：US20240152608A1
公开(公告)日：2024-05-09
申请号：US18385387
申请日：2023-10-31
申请人： Korea Internet & Security Agency
发明人： Do Won KIM , Tae Eun KIM , Ki Jong SON , Sae Woom LEE , Seul Ki CHOI , Tae Hyeon KIM , Gyeong Jin NA
IPC分类号： G06F21/55
CPC分类号： G06F21/554 , G06F2221/034
摘要： A method of supporting decision-making of security control includes: (a) when an system for automatically analyzing a security threat receives a security warning from a security device, collecting security threat events generating the security warning from the security device; (b) when the collected security threat events exceed a preset event processing threshold, generating, by the system for automatically analyzing a security threat, a first request message for preferentially processing a security event; (c) when receiving the first request message generated from the system, determining, by the system for supporting priority of security control, a priority processing order of the security threat events, and notifying the system; and (d) when receiving the second request message generated from the system, determining, by the system for supporting priority of security control, a priority processing order and notifying the system for automatically analyzing a security threat of the determined priority processing order.

4. 发明公开

US20240037552A1 METHOD AND SYSTEM FOR BLOCKING ILLEGAL WITHDRAWAL USING VIRTUAL ASSET DOUBLE PAYMENT PREVENTION POLICY 审中-公开
公开(公告)号：US20240037552A1
公开(公告)日：2024-02-01
申请号：US18328036
申请日：2023-06-02
申请人： The Research & Business Development Center of KNPU , Korea Internet & Security Agency
发明人： Cheol Hee YOON , Gyeong Min BAEK , Dae Il JANG , Yong Hee SHIN
IPC分类号： G06Q20/40
CPC分类号： G06Q20/401
摘要： The exemplary embodiments of the present disclosure provides a method and a system for blocking illegal withdrawal of a virtual asset by monitoring unapproved fraudulent transactions in which the virtual asset address managed by the virtual asset exchange connected to the virtual asset blockchain network is designated as the transfer address and restricting withdrawal transactions using a double payment prevention policy for unapproved illegal transactions.

5. 发明公开

US20230146636A1 SYSTEM AND METHOD OF DETECTING ABNORMAL ACT THREATENING TO SECURITY BASED ON ARTIFICIAL INTELLIGENCE 审中-公开
公开(公告)号：US20230146636A1
公开(公告)日：2023-05-11
申请号：US17972655
申请日：2022-10-25
申请人： Korea Internet & Security Agency
发明人： Do Won KIM , Tae Eun KIM , Ki Jong SON , Seul Ki CHOI , Jong Ki KIM
IPC分类号： G06F21/55 , G06N20/00
CPC分类号： G06F21/554 , G06N20/00 , G06F2221/034
摘要： Disclosed is a system and a method of detecting an abnormal act threatening to security based on artificial intelligence according to the present invention, and, more particularly, a system and a method of detecting an abnormal act threatening to security based on artificial intelligence that are capable of rapidly carrying out pre-processing of a large-scaled data set based on multi processing, and efficiently detecting the abnormal act threatening to security via various pieces of security device on the basis of studied artificial intelligence.

6. 发明申请

US20220383298A1 METHOD AND APPARATUS FOR IDENTIFYING WALLETS ASSOCIATED WITH VIRTUAL ASSET SERVICE PROVIDERS 有权
公开(公告)号：US20220383298A1
公开(公告)日：2022-12-01
申请号：US17817824
申请日：2022-08-05
申请人： KOREA INTERNET & SECURITY AGENCY , Lambda256, CO., LTD
发明人： Yong Hee SHIN , Moon Hee CHO , Kyeong Han KIM , Dae Il JANG , Seung Goo JI , Jae Hoon OH
IPC分类号： G06Q20/36
摘要： A method for identifying a wallet address associated with a virtual asset service provider is provided. The method comprises receiving a target wallet address, obtaining a transaction of a virtual asset associated with the target wallet address, obtaining a list of a plurality of known wallet addresses of virtual asset service providers (VASPs) and identifying a type of the target wallet address, by performing at least one of a cold wallet determination routine and a hot wallet determination routine for the target wallet address, based on the transaction and the list of known wallet addresses of the VASPs.

7. 发明授权

US11245712B2 Method and apparatus for generating virtual malicious traffic template for terminal group including device infected with malicious code 有权
公开(公告)号：US11245712B2
公开(公告)日：2022-02-08
申请号：US16517500
申请日：2019-07-19
申请人： KOREA INTERNET & SECURITY AGENCY
发明人： Sung Taek Oh , Woong Go , Mi Joo Kim , Jae Hyuk Lee , Jun Hyung Park
IPC分类号： H04L29/06 , G06N20/00
摘要： There is provided a method of generating malicious traffic, the method being performed by a computing apparatus and comprising obtaining traffic data transmitted from a first device infected with first malicious code or received by the first device, generating a traffic template of the first device by analyzing the traffic data, and generating a malicious traffic template of a terminal group, wherein the malicious traffic template of the terminal group comprises the traffic template of the first device.

8. 发明申请

US20210160253A1 METHODS AND SYSTEMS FOR IDENTIFYING AN IOT DEVICE 有权
公开(公告)号：US20210160253A1
公开(公告)日：2021-05-27
申请号：US16843834
申请日：2020-04-08
申请人： Korea Internet & Security Agency
发明人： Jae Hyuk Lee , Woong Go , Hong Geun Kim , Mi Joo Kim , Sung Taek Oh , Soon Tai Park
IPC分类号： H04L29/06 , H04L29/08
摘要： Provided are methods and systems for identifying an Internet of things (IoT) device. A method of clustering an Internet of things (IoT) device, the method comprises determining a device group to which the IoT device belongs by applying the network packet of the IoT device obtained from the device identification apparatus to the clustering model, transmitting device group information according to the determination to the device identification apparatus and obtaining detailed identification information of the IoT device from the device identification apparatus, wherein the detailed identification information comprises a detailed model of the IoT device analyzed using the device group information.

9. 发明授权

US10945117B1 Method and apparatus for detecting diameter protocol IDR message spoofing attack in mobile communication network 有权
公开(公告)号：US10945117B1
公开(公告)日：2021-03-09
申请号：US16832747
申请日：2020-03-27
申请人： KOREA INTERNET & SECURITY AGENCY
发明人： Seong Min Park , Young Kwon Park , Bo Min Choi , Eun Hye Ko , Tae Eun Kim , Jin Hyun Cho , Do Won Kim , Hyung Jin Cho , Hwan Kuk Kim
IPC分类号： H04W8/18 , H04W8/12 , H04W12/06 , H04W8/04 , H04L29/12 , H04L29/06
摘要： Provided are methods of detecting a Diameter spoofing attack. According to an embodiment, the method comprises, obtaining a normal International Mobile Subscriber Identity (IMSI) from a packet of a Diameter S6a protocol transmitted from a Mobile Management Entity (MME) to a Home Subscriber Server (HSS) of a home network, adding a record comprising the normal IMSI to a session table, obtaining an Insert Subscriber Data Request (IDR) message of the Diameter S6a protocol and determining a category of the IDR message.

10. 发明申请

US20140317737A1 HYPERVISOR-BASED INTRUSION PREVENTION PLATFORM AND VIRTUAL NETWORK INTRUSION PREVENTION SYSTEM 审中-公开
标题翻译：基于超级基础的入侵预防平台和虚拟网络入侵预防系统
公开(公告)号：US20140317737A1
公开(公告)日：2014-10-23
申请号：US13871264
申请日：2013-04-26
申请人： KOREA INTERNET & SECURITY AGENCY
发明人： YOUNG-SANG SHIN , II-Ahn Cheong , Seul-Gi Lee , Mi-Yeon Yoon , Tong-Wook Hwang , Kyung-Ho Son
IPC分类号： H04L29/06
CPC分类号： H04L63/1408 , H04L63/20
摘要： Hypervisor-based intrusion prevention platform is provided. The hypervisor-based intrusion prevention platform comprises a virtual network intrusion prevention system (vIPS) framework which obtains internal information of a virtualization system from a hypervisor and performs security control on the hypervisor in response to the result of intrusion detection carried out by using the internal information of the virtualization system, a hypervisor security application programming interface (API) module which provides an API used by the vIPS framework to access the hypervisor, an administrator account management and authentication module which manages an administrator account of a vIPS and authenticates the administrator account, an environment setting management module which manages environment setting values of modules within the vIPS, and an external interface module which provides an interface for system control and security control.
摘要翻译：提供基于管理程序的入侵防御平台。基于虚拟机管理程序的入侵防御平台包括虚拟网络入侵防御系统（vIPS）框架，从虚拟机管理程序获取虚拟化系统的内部信息，并对管理程序进行安全控制，以响应通过使用内部虚拟化系统的信息，提供由vIPS框架用于访问管理程序的API的管理程序安全应用程序编程接口（API）模块，管理vIPS的管理员帐户并管理管理员帐户的管理员帐户管理和验证模块管理vIPS内的模块的环境设定值的环境设定管理模块，以及提供用于系统控制和安全控制的接口的外部接口模块。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式